Identify and select 
core function(s) 
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For a selected core function, identify 
failure mode(s) (FM) 
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For each FM acquire likelihoods of 
occurrence (FM OCC) and detection 
(FM DET) 



For each FM, identify effects 
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For each effect acquire compliance 
and strategic plan relationship, 
severity rating (SEV) and 
response rating (RESP) 
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For each FM, identify possible causes 
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For each cause, collect 
likelihood of occurrence (OCC) 
and detection (DET) 
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Produce risk 
prioritization report 



FIG.2 
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Calculate criticality 
score (CRIT) 
SEV x OCC 



Calculate Risk Priority 
Number (RPN) 
SEV x OCC x DET 



Determine Responsiveness 
Factor (RF) from RESP using 
table look-up 



Calculate adjusted 
criticality score 
CRIT x (SEV/RF) 
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Quantify risk items 
based on 
financial data 



Select risk items 
meeting specific 
criteria 
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Produce risk 
prioritization report 
and stability analysis 

7 



3(9 



FIG. 3 





Select risk item 
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